CVE-2026-66334: OFBD SMM Write Validation Issues

Published Nov 10, 2026

Updated

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits unmapped memory. It could also impact Integrity, and Availability.

Event History

Nov 10, 2026

CVE Published

via MITRE·04:22 PM

Data Sourced

via MITRE·04:22 PM

DescriptionWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using affected AMI APTIOV BIOS firmware are exposed when a privileged local user can access the firmware update processing path.

What level of access does an attacker need?

Exploitation requires privileged local access. The provided information does not indicate that remote or unauthenticated exploitation is possible.

What is the likely impact of exploitation?

An out-of-bounds write during firmware update processing may cause a denial of service, including a crash or failed firmware update when unmapped memory is written. Integrity and availability may also be affected.

CVE-2026-66334: OFBD SMM Write Validation Issues

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What is the likely impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What is the likely impact of exploitation?